OR
Vendor
Orangescrum
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-47716 | OR orangescrum Orangescrum | 5.4 | Dec 23 | Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints |
| CVE-2021-47721 | OR orangescrum Orangescrum | 8.8 | Dec 23 | Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation |
| CVE-2021-47720 | OR orangescrum Orangescrum | 7.1 | Dec 23 | Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters |
| CVE-2024-48392 | OR Orangescrum Orangescrum | 5.4 | Jan 21 | OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-1783 | OR Orangescrum Orangescrum | 7.6 | Jun 23 | OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering |
| CVE-2023-0738 | OR Orangescrum Orangescrum | 6.1 | Apr 4 | OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application |
| CVE-2023-0624 | OR Orangescrum Orangescrum | 6.1 | Feb 9 | OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application |
| CVE-2023-0454 | OR Orangescrum Orangescrum | 8.1 | Feb 1 | OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server |
| CVE-2023-0164 | OR Orangescrum Orangescrum | 8.8 | Jan 18 | OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server |